If we fail to implement adequate risk management controls, the likelihood of a material loss due to employee misconduct or data breaches will significantly increase, and there is a possibility of a major financial hit.